On Tue, Dec 23, 2014 at 3:01 PM, Kevin Hilton <kevhil...@gmail.com> wrote:
> I know this topic has been brought up before, however I guess I'll just
> add it to the wish list for the Android Client -- Mr. Rash -- I know you
> don't code for this client
>
>
True, I haven't taken the leap into mobile development yet, but I'm hoping
to change that fairly soon.
> Base64 support -- yes I've seen this is added as a wish list on the git
> page:
> It would be nice on the Android client however to be able to store any
> base64 encoded pair in a file. As it currently sits right now, the only
> difference between version 1 and version 2 of the Android client is the
> addition of the HMAC key -- which essentially makes it just another
> password. So now version 1 of the client has one password and version 2
> has 2 passwords. If base64 is implemented, possibly it would be best to be
> able to import, cache, store the base64 encoded HMAC key and then leave
> then encode the rijndael key on the fly. I'm not sure how the client
> actually works.
>
>
Agreed that it would be a good idea to have the Android client (and the iOS
client too) store base64-encoded versions of the encryption and HMAC keys
in a file. This would be similar to how the main client works as well. I've
added a comment on the github issue to track this.
One quick note - while it is true that that HMAC key sort of works like a
2nd password from a user's perspective, it does provide a significant
security benefit. Just wanted to mention this for the larger group so there
is clarity around why the HMAC key was added to the Android client:
https://www.cipherdyne.org//fwknop/docs/fwknop-tutorial.html#hmac-authenticated-encryption
Thanks,
--Mike
> Thanks for any consideration.
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming! The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is
> your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net
> _______________________________________________
> Fwknop-discuss mailing list
> Fwknop-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/fwknop-discuss
>
>
--
Michael Rash | Founder
http://www.cipherdyne.org/
Key fingerprint = 53EA 13EA 472E 3771 894F AC69 95D8 5D6B A742 839F
------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Fwknop-discuss mailing list
Fwknop-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fwknop-discuss
